Commit ba72c6f6 authored by Robert Speicher's avatar Robert Speicher
Browse files

Escape text passed directly to gfm

parent e8a77c53fd7f
...@@ -5,4 +5,4 @@ ...@@ -5,4 +5,4 @@
%strong.cdark= commit.author_name %strong.cdark= commit.author_name
– –
= image_tag gravatar_icon(commit.author_email), class: "avatar", width: 16 = image_tag gravatar_icon(commit.author_email), class: "avatar", width: 16
= gfm truncate(commit.title, length: 50) rescue "--broken encoding" = gfm escape_once(truncate(commit.title, length: 50)) rescue "--broken encoding"
...@@ -31,7 +31,7 @@ ...@@ -31,7 +31,7 @@
.alert-message.error.status_info Closed .alert-message.error.status_info Closed
- else - else
.alert-message.success.status_info Open .alert-message.success.status_info Open
= gfm @issue.title = gfm escape_once(@issue.title)
.middle_box_content .middle_box_content
%cite.cgray Created by %cite.cgray Created by
......
...@@ -5,7 +5,7 @@ ...@@ -5,7 +5,7 @@
.alert-message.error.status_info Closed .alert-message.error.status_info Closed
- else - else
.alert-message.success.status_info Open .alert-message.success.status_info Open
= gfm @merge_request.title = gfm escape_once(@merge_request.title)
.middle_box_content .middle_box_content
%div %div
......
...@@ -21,7 +21,7 @@ ...@@ -21,7 +21,7 @@
.alert-message.error.status_info Closed .alert-message.error.status_info Closed
- else - else
.alert-message.success.status_info Open .alert-message.success.status_info Open
= gfm @milestone.title = gfm escape_once(@milestone.title)
%small.right= @milestone.expires_at %small.right= @milestone.expires_at
.middle_box_content .middle_box_content
......
...@@ -11,7 +11,7 @@ ...@@ -11,7 +11,7 @@
%code= commit.short_id %code= commit.short_id
= image_tag gravatar_icon(commit.author_email), class: "", width: 16 = image_tag gravatar_icon(commit.author_email), class: "", width: 16
= gfm truncate(commit.title, length: 40) = gfm escape_once(truncate(commit.title, length: 40))
%span.update-author.right %span.update-author.right
= time_ago_in_words(commit.committed_date) = time_ago_in_words(commit.committed_date)
ago ago
......
...@@ -13,7 +13,7 @@ ...@@ -13,7 +13,7 @@
= link_to project_commits_path(@project, commit.id) do = link_to project_commits_path(@project, commit.id) do
%code= commit.short_id %code= commit.short_id
= image_tag gravatar_icon(commit.author_email), class: "", width: 16 = image_tag gravatar_icon(commit.author_email), class: "", width: 16
= gfm truncate(commit.title, length: 40) = gfm escape_once(truncate(commit.title, length: 40))
%td %td
%span.right.cgray %span.right.cgray
= time_ago_in_words(commit.committed_date) = time_ago_in_words(commit.committed_date)
......
...@@ -17,7 +17,7 @@ ...@@ -17,7 +17,7 @@
= link_to project_commit_path(@project, commit.id) do = link_to project_commit_path(@project, commit.id) do
%code= commit.short_id %code= commit.short_id
= image_tag gravatar_icon(commit.author_email), class: "", width: 16 = image_tag gravatar_icon(commit.author_email), class: "", width: 16
= gfm truncate(commit.title, length: 40) = gfm escape_once(truncate(commit.title, length: 40))
%td %td
%span.update-author.right %span.update-author.right
= time_ago_in_words(commit.committed_date) = time_ago_in_words(commit.committed_date)
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment